[squid-users] Kerberos, squid and IE8 with windows integrated validation

2013-06-20 Thread SPG
Hi, I have integrated squid with kerberos and all work fine. When I open the IE 8 never ask by the password, because I activate in web browser integrated windows authentication. But I need that squid ask for the password because some web get the user and password of windows domain and deny

[squid-users] Re: Kerberos, squid and IE8 with windows integrated validation

2013-06-20 Thread SPG
If I deactivate the option in web browser, the proxy give me a error because I don't have persmission for access to cache, but not ask me for the password for authenticate What error exactly? Autentication cache error, because when disabled the integrated authentication in web browser, it

[squid-users] Kerberos load balancer and AD

2013-05-22 Thread SPG
Hi, I've read a lot of post about kerberos and load balancers, but I don't have clear the configuration. I have work one squid with kerberos, but now I want balance the service. I think that correct configuration is: 1ยบ - Create a account o computer acount in AD loadbalancer.abg.local

Re: Fwd: [squid-users] Re: Re: kerberos auth failing behind a load balancer

2013-05-22 Thread SPG
Hi, If I understand correctly, you've created a account for all squid and one for balance service, and you've associated the SPN of balance service for all squid account. Is this correct? Aren't there problems with ducplicat SPN in AD? A lot of thanks. -- View this message in context:

[squid-users] Re: Kerberos load balancer and AD

2013-05-22 Thread SPG
Hi, then, with this option you don't need create an account for all squids servers and duplicate spn in each account of squid. Only need a account for load balancer service. I question it, because I read this post in the morning and I have doubts . Is it true?

[squid-users] Re: Kerberos with 2008/2003 DC

2013-05-09 Thread SPG
Sorry, I thought that I post it. I had the fqdn in web browser proxy configuration but I put the ip in the proxy pack for automatic web browser configuration. http://proxyprueba.abg.corp/public/PAC/getpacfile.htmopt -- web browser configuration if(

[squid-users] Re: Kerberos with 2008/2003 DC

2013-05-08 Thread SPG
Thanks Markus. I posted my error and the solution. Perhaps you didn't receive the mail A lot of thanks. -- View this message in context: http://squid-web-proxy-cache.1019090.n4.nabble.com/Kerberos-with-2008-2003-DC-tp4659198p4659861.html Sent from the Squid - Users mailing list archive at

[squid-users] Re: Kerberos with 2008/2003 DC

2013-05-07 Thread SPG
A lot of thanks Markus and sorry by my big delay in answering but I didn't know suficient for reply you. I read a lot of posts and I checked my configuration and I think that now I can reply you. My configuration [logging] default = FILE:/var/log/krb/krb5libs.log kdc =

[squid-users] Re: Kerberos with 2008/2003 DC

2013-05-07 Thread SPG
More info [root@proxyprueba ~]# /usr/lib64/squid/squid_kerb_auth_test -d -s HTTP/proxyprueba.abg.c...@abg.corp Token:

[squid-users] Kerberos with 2008/2003 DC

2013-03-25 Thread SPG
Hi, I have a domain with 2008 and 2003 DCs. If I genus a keytab in windows 2008 only work with 2008 server's and if I genus a keytab with 2003 it not work in 2008 or 2003. The last case error example [root@proxyprueba ~]# kinit -V -k -t /etc/squid/.keytab proxyprueba.xxx.xxx Using default cache: